Question 1

Which bandwidth limit is specified by default in the limits.conf of universal forwarder?

Options :

A : 256KB

B : 128KB

C : 512KB

D : Infinity

Answer: A

Question 2

Which of the following statements is true about data transformations using SEDCMD?

Options :

A : Can only be used to mask or truncate raw data.

B : Configuredin props.conf and transform.conf.

C : Can be used to manipulate the sourcetype per event.

D : Operates on a REGEX pattern match of the source, sourcetype, or host of an event.

Answer: A

Question 3

What are the two options for Dynamic Data Storage in Splunk Cloud that allow you to move expired data from indexes to another storage location?

Options :

A : Splunk Archive and Splunk Backup

B : Splunk Archive and Self Storage

C : Self Storage and Splunk Restore

D : Splunk Backup and Self Storage

Answer: B

Question 4

In case of a Change Request, which of the following should submit a support case for Splunk Support?

Options :

A : The party requesting the change.

B : Certified Splunk Cloud administrator.

C : Splunk infrastructure owner.

D : Any person with the appropriate entitlement

Answer: D

Question 5

What is the name of the configuration file where you can invoke data transformations by associating them with a host, source, or source type?

Options :

A : inputs.conf

B : limits.conf

C : props.conf

D : transforms.conf

Answer: D